$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1205/7D231E041A5511EA88042211C4F9AE02/o0K4Har3eauhbTK2-wuDD4ULT_A.mft File: o0K4Har3eauhbTK2-wuDD4ULT_A.mft (raw, json) Hash identifier: 3C48invKsPnJNQXNDj+sKFJHskCl0ipUQGftUG/T1aA= Subject key identifier: ED:94:5E:18:A9:88:01:EA:28:C5:73:09:D5:EA:6E:E0:56:08:D2:1F Authority key identifier: A3:42:B8:1D:AA:F7:79:AB:A1:6D:32:B6:FB:0B:83:0F:85:0B:4F:F0 Certificate issuer: /CN=A91A1205/serialNumber=A342B81DAAF779ABA16D32B6FB0B830F850B4FF0 Certificate serial: 0BD2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0K4Har3eauhbTK2-wuDD4ULT_A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1205/7D231E041A5511EA88042211C4F9AE02/o0K4Har3eauhbTK2-wuDD4ULT_A.mft Manifest number: 0BCC Signing time: Wed 14 May 2025 18:58:00 +0000 Manifest this update: Wed 14 May 2025 18:58:00 +0000 Manifest next update: Wed 21 May 2025 18:58:00 +0000 Files and hashes: 1: o0K4Har3eauhbTK2-wuDD4ULT_A.crl (hash: 1P5fJhPFoPWiHho2JgPV+WqXtBp7rL+QVWY5XIdbETk=) 2: 3D992D3A1A8411EAA026D229C4F9AE02.roa (hash: j0DWhsEHoal3Q4LsD1CyE+J4i6jhKjEMjW9pXFwYCvw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1205/7D231E041A5511EA88042211C4F9AE02/o0K4Har3eauhbTK2-wuDD4ULT_A.crl rsync://rpki.apnic.net/member_repository/A91A1205/7D231E041A5511EA88042211C4F9AE02/o0K4Har3eauhbTK2-wuDD4ULT_A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0K4Har3eauhbTK2-wuDD4ULT_A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 18:57:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3026 (0xbd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1205, serialNumber=A342B81DAAF779ABA16D32B6FB0B830F850B4FF0 Validity Not Before: May 14 18:58:00 2025 GMT Not After : May 21 18:58:00 2025 GMT Subject: CN=6824e7b8-42d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:6f:e4:09:8b:20:6d:95:33:a2:b7:fc:df:7f: 33:6f:d5:de:fa:e1:91:c6:0c:d8:ce:8b:79:86:74: 5d:e6:db:0f:51:46:a0:72:08:74:9d:df:72:98:9e: c9:79:85:39:0a:c2:2a:ca:15:50:25:89:dc:e1:9c: 47:13:11:8f:69:c9:e1:ca:4d:c9:94:12:52:b1:0b: 6d:87:55:2d:b8:8b:cf:ea:e7:fa:7e:fa:e9:33:47: 30:48:76:a3:24:44:7a:eb:19:ff:96:90:34:9c:bb: aa:2c:3f:f1:6b:17:42:34:53:3f:43:b5:ee:c1:5c: a7:fe:00:79:45:22:2d:3b:1a:72:19:a5:c3:f8:d5: ad:9b:8c:f8:e1:71:bd:96:89:f1:07:a9:43:5b:90: e0:e8:ea:f9:a1:3d:26:ea:16:7f:d5:e5:8e:45:7c: 0a:e5:d1:26:a2:5d:7b:7a:05:c5:c7:42:fe:b3:5e: 59:cd:53:77:f3:ab:f3:25:18:cc:a1:b5:18:b3:77: 96:e6:7f:5f:05:60:8a:1b:99:c1:fb:89:0d:09:7c: e4:96:ba:1c:b6:8c:84:1b:d2:1a:23:26:1d:be:76: 2e:85:4d:1e:a5:fa:7c:b6:c4:46:61:c6:50:e7:7d: 91:80:db:ff:7a:40:e6:a8:31:ca:56:8d:9a:7f:ef: 33:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:94:5E:18:A9:88:01:EA:28:C5:73:09:D5:EA:6E:E0:56:08:D2:1F X509v3 Authority Key Identifier: keyid:A3:42:B8:1D:AA:F7:79:AB:A1:6D:32:B6:FB:0B:83:0F:85:0B:4F:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1205/7D231E041A5511EA88042211C4F9AE02/o0K4Har3eauhbTK2-wuDD4ULT_A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0K4Har3eauhbTK2-wuDD4ULT_A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1205/7D231E041A5511EA88042211C4F9AE02/o0K4Har3eauhbTK2-wuDD4ULT_A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:10:52:1b:30:98:5c:27:91:be:9d:a9:7b:dd:95:71:43:f9: 7c:3b:47:75:d1:25:7b:14:31:f3:cc:76:fa:06:70:6d:fc:20: 8d:3f:52:c2:cd:c9:a6:db:d3:e9:c3:75:3b:de:5d:11:5d:8d: 25:7e:f3:64:73:67:73:4b:9e:07:87:7e:b0:46:b1:1c:ef:da: 65:8d:fd:cf:83:07:47:07:46:92:4f:95:56:4d:fb:3a:37:10: e9:40:66:e4:13:83:22:22:21:0c:52:99:6e:49:c5:82:2a:3b: 5a:a3:6c:bc:2e:3b:e3:b6:d4:ba:5f:1a:e6:0a:a1:8c:17:8c: e7:cb:dd:55:83:bd:c2:ab:81:8e:08:12:d0:34:a0:d1:96:07: b8:42:3c:b0:66:7a:5c:84:2d:2c:ec:f4:d2:8e:6c:b9:33:1d: 0c:59:77:a4:2e:08:a0:d7:3d:f8:96:d5:78:84:ff:3a:5a:4c: 75:f4:d6:ed:39:5a:14:8c:40:dd:53:11:32:47:3e:53:01:1c: 77:f7:41:76:67:01:cb:9c:be:9d:3f:9f:e7:99:61:d2:5f:f6: 93:95:47:86:c6:8b:de:4a:62:1a:a3:c0:41:77:6f:0b:4f:26: 6c:e8:4e:c4:7e:ba:4f:6d:03:3d:20:0c:98:8c:d1:d3:e3:a8: 41:01:8d:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC9IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTEyMDUxMTAvBgNVBAUTKEEzNDJCODFEQUFGNzc5QUJBMTZEMzJCNkZCMEI4MzBG ODUwQjRGRjAwHhcNMjUwNTE0MTg1ODAwWhcNMjUwNTIxMTg1ODAwWjAYMRYwFAYD VQQDEw02ODI0ZTdiOC00MmQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3W/kCYsgbZUzorf8338zb9Xe+uGRxgzYzot5hnRd5tsPUUagcgh0nd9ymJ7J eYU5CsIqyhVQJYnc4ZxHExGPacnhyk3JlBJSsQtth1UtuIvP6uf6fvrpM0cwSHaj JER66xn/lpA0nLuqLD/xaxdCNFM/Q7XuwVyn/gB5RSItOxpyGaXD+NWtm4z44XG9 lonxB6lDW5Dg6Or5oT0m6hZ/1eWORXwK5dEmol17egXFx0L+s15ZzVN386vzJRjM obUYs3eW5n9fBWCKG5nB+4kNCXzklroctoyEG9IaIyYdvnYuhU0epfp8tsRGYcZQ 532RgNv/ekDmqDHKVo2af+8zAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO2UXhip iAHqKMVzCdXqbuBWCNIfMB8GA1UdIwQYMBaAFKNCuB2q93mroW0ytvsLgw+FC0/w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTIwNS83RDIzMUUwNDFB NTUxMUVBODgwNDIyMTFDNEY5QUUwMi9vMEs0SGFyM2VhdWhiVEsyLXd1REQ0VUxU X0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL28wSzRIYXIzZWF1aGJUSzItd3VERDRVTFRfQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MTIwNS83RDIzMUUwNDFBNTUxMUVBODgwNDIyMTFDNEY5QUUwMi9vMEs0SGFyM2Vh dWhiVEsyLXd1REQ0VUxUX0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiEFIbMJhcJ5G+nal73ZVxQ/l8O0d10SV7FDHzzHb6BnBt/CCNP1LC zcmm29Ppw3U73l0RXY0lfvNkc2dzS54Hh36wRrEc79pljf3PgwdHB0aST5VWTfs6 NxDpQGbkE4MiIiEMUpluScWCKjtao2y8LjvjttS6XxrmCqGMF4zny91Vg73Cq4GO CBLQNKDRlge4QjywZnpchC0s7PTSjmy5Mx0MWXekLgig1z34ltV4hP86Wkx19Nbt OVoUjEDdUxEyRz5TARx390F2ZwHLnL6dP5/nmWHSX/aTlUeGxoveSmIao8BBd28L TyZs6E7EfrpPbQM9IAyYjNHT46hBAY0E -----END CERTIFICATE-----Generated at Fri May 16 02:47:54 2025 by rpki-client